TOTOLINK N200RE 安全漏洞

The TOTOLINK N200RE is a wireless broadband router with 11N wireless technology. An access control error vulnerability exists in the TOTOLINK N200RE, which can be exploited by an attacker to obtain Wi-Fi system information, such as the Wi-Fi SSID and Wi-Fi password, without logging in to the...

DeShang DSO2O Access Control Error Vulnerability

DeShang DSO2O is a new retail e-commerce system from DeShang, China. An Access Control Error vulnerability exists in DeShang DSO2O version 4.1.0 and earlier, which stems from an unknown section in /install/install.php that results in incorrect access control...

TOTOLINK T6 访问控制错误漏洞

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. An access control error vulnerability exists in TOTOLINK T6 version 4.1.9cu.5241B20210923, which originates from an access control error in the file /cgi-bin/cstecgi.cgi. An attacker could exploit this vulnerabilit...

Juzaweb CMS Security Vulnerability

Juzaweb CMS is a content management system developed by Juzaweb Individual Developer based on the Laravel framework and Web platform. A security vulnerability exists in Juzaweb CMS 3.4 and earlier versions, which stems from an Access Control Error vulnerability due to failure to properly validate...

WALLIX Bastion Security Vulnerability

WALLIX Bastion is a modular solution from WALLIX France. A security vulnerability exists in WALLIX Bastion versions prior to 9.0.10, 10.0.6, and 10.4.2, which stems from incorrect access control and can be exploited by an attacker to gain unauthorized access to the...

pyLoad Access Control Error Vulnerability

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. An access control error vulnerability exists in versions prior to pyLoad 0.5.0b3.dev76, which stems from allowing an unauthenticated...

IBM CICS Transaction Gateway 安全漏洞

IBM CICS Transaction Gateway is a connector for modernizing enterprise CICS assets from International Business Machines IBM. An access control error vulnerability exists in IBM CICS Transaction Gateway version 9.3, which can be exploited by an attacker to transfer or view files...

Nextcloud Access Control Error Vulnerability

Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud Germany. An Access Control Error vulnerability exists in Nextcloud Server, which stems from the ability to delete and modify workflows by bypassing calls sent direct...

Wasmer Access Control Error Vulnerability

Wasmer is a Wasmer open source application that enables lightweight containers to run anywhere. An Access Control Error vulnerability exists in Wasmer 3.0.0 and later versions that stems from allowing Wasmer programs to access file systems outside of the sandbox...

Heimdal Access Control Error Vulnerability

Heimdal is a Kerberos implementation and security program from Heimdal open source. Heimdal suffers from an Access Control Error vulnerability that originates from allowing an attacker to bypass web filtering, execute arbitrary code, and obtain sensitive information via the DarkLayer Guard threat...

KylinSoft hedron-domain-hook Access Control Error Vulnerability

KylinSoft hedron-domain-hook is a component of China's KylinSoft KylinSoft. An access control error vulnerability exists in KylinSoft hedron-domain-hook 3.8.0.12-0k0.5 and prior versions, which stems from a security issue in the initkcm function of the component DBus Handler that results in...

EuroTel ETL3100 Security Vulnerability

The EuroTel ETL3100 is a radio transmitter from EuroTel. A security vulnerability exists in the EuroTel ETL3100 version v01c01 and v01x37, which stems from the presence of an Access Control Error vulnerability. An attacker could exploit the vulnerability to disclose sensitive information and bypa...

Ethex Access Control Error Vulnerability

Ethex is an ethereum smart contract lottery game from the Ethex team. Ethex suffers from an Access Control Error vulnerability that stems from the fact that the file EthexJackpot.sol can lead to incorrect access control...

Inventory Management System Access Control Error Vulnerability

Inventory Management System is an inventory management system from the individual developers of stemword. An access control error vulnerability exists in CodeAstro POS and Inventory Management System version 1.0 due to the presence of an unknown function in /accountscon/registeraccount in the...

IceCMS Access Control Error Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. An Access Control Error vulnerability exists in Thecosy IceCMS version 2.0.1, which stems from the presence of an unknown function in /adplanet/PlanetCommentList in...

Fortinet FortiOS Access Control Error Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An Access Control Error...

Zammad Access Control Error Vulnerability (CNVD-2023-9782629)

Zammad is a suite of ticket management software from the German company Zammad. An access control error vulnerability exists in Zammad, which stems from a lack of rate limiting in the email address verification function, and can be exploited by an attacker to potentially send many requests to a...

Software AG webMethods Access Control Error Vulnerability

Software AG webMethods is Software AG's suite of integration and application development tools used to help organizations with tasks such as application integration, data integration, business process management, and application development. webMethods is designed to help organizations better...

Dell Rugged Control Center Access Control Error Vulnerability (CNVD-2024-0019327)

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on the ruggedized device, such as application settings, keyboard backlight settings, night mode settings, stealth mode settings, window settings, antenna switch settings and GPS settings. An...

Dell Rugged Control Center 安全漏洞

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on the ruggedized device, such as application settings, keyboard backlight settings, night mode settings, stealth mode settings, window settings, antenna switch settings and GPS settings. An...